HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 15, 2014.
- Organization as reported
- Walgreen Co., IL
- Entity type as reported
- Healthcare Provider
- Category as reported
Other
- Location of information as reported
- Paper/Films
- Submission date
- Dec. 15, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14914, row:6053)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Walgreens, mailed patient notification letters to incorrect third parties. The letters included first and last names, addresses, dates of birth, phone numbers, provider names, and details of the vaccines administered and affected approximately 160,000 individuals. The CE provided breach notification to HHS, affected individuals, and the media, and placed notice on its website. Following the breach, the CE resolved issues in its use of the electronic health record (EHR) that were factors in the breach, updated data in the prescriber database and trained its staff on the new requirements. As a result of OCR’s investigation, Walgreens improved safeguards by resolving two issues in its use of the EHR.